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Abstract: A reconfigurable, multi-party quantum key distribution scheme 
is experimentally demonstrated by utilizing a poled fiber-based source 
of broadband polarization-entangled photon pairs and dense wavelength- 
division multiplexing (DWDM). The large bandwidth (> 90 nm centered 
about 1555 nm) and highly spectrally-correlated nature of the entangled 
source is exploited to allow for the generation of more than 25 frequency- 
conjugate entangled pairs when aligned to the standard 200-GHz ITU grid. 
Such a network can serve more than 50 users simultaneously, allowing any 
one user on the network to establish a QKD link with any other user through 
wavelength-selective switching. The entangled pairs are delivered over 40 
km of actual fiber (equivalent to 120 km of fiber based on channel-loss 
experienced), and a secure key rate of more than 20 bits/s per bi-party is 
observed. 
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Quantum key distribution (QKD) offers, in principle, an unconditionally secure method for 
two parties to generate a private cryptographic key. Many point-to-point (PTP) demonstrations 
using weak-coherent source-based |[T1 and entanglement-based MB quantum-cryptographic 
protocols such as the vaunted BB84 il, BBM92 la and E91 H (respectively) have been 
demonstrated. However, PTP connections do not provide an efficient method to connect multi¬ 
ple users, and efforts thusfar in extending PTP links into multi-user networks have proven to be 
cumbersome at best. 

To that end, QKD networks based upon the hub-and-spoke model, where many end-users 
can be connected to a trusted node E El Idol, are used. Should any one end-user wish to 
communicate with another user secretly, a random secret key is first generated at the node, then 
QKD is performed between the node and each user separately; finally, the key is sent to each 
end-user classically using the QKD key material as a one-time pad. However, the trust model 
for such a network topology is inherently problematic, as any security vulnerability on the node 
will compromise the entire network. Additionally, time-multiplexing is often required in such 
circumstances to service multiple users lElIIH, and only one end-user can perform QKD with 
the central node at a time. 

Other schemes |[T3l [141 involving wavelength-division multiplexing (WDM) have been in¬ 
troduced where individual users on a PTP network can perform QKD with one another simply 
by addressing each other at different laser wavelengths. All users are equivalent on the network, 
and no central trusted node is required. However, each user must have both single photon de¬ 
tectors and laser sources at their disposal, and the incremental cost of adding a new user to an 
A-user network requires increasing the number of laser wavelengths available to each user to 
A+1. 

In contrast, we show that a reconfigurable multi-user QKD network utilizing the distribution 
of polarization-entangled photon pairs from a (potentially untrustworthy) central office can be 
realized efficiently using a single broadband polarization-entangled source (Fig. [T]). The en¬ 
tangled photon pairs generated from the source are highly spectrally-anticorrelated (Fig. O, 
which allows for multiple (N) frequency-conjugate pairs to be carved out of the spectrum and 
distributed to A (> 25) pairs of users simultaneously. With a 2A x 2A wavelength-selective 
switch (WSS) to perform dynamic spectrum allocation ca, and without any additional hard¬ 
ware resource, any user on the network can perform QKD with any other user. Additionally, 
our scheme allows multiple users (2A > 50) to perform QKD simultaneously; when combined 
with time-multiplexing, such a scheme can extend the number of users well beyond what the 
bandwidth of the source can accommodate. 

Previous works GSIEI demonstrated the distribution of polarization-entangled photon pairs 
using WDM technology. However, QKD was not performed in either of those cases. Fiber spans 
of 10 km were used in na, while lEl did not distribute the entangled photon pairs over any 
appreciable length (> 500 metres) of fiber. Additionally, both works employed PPLN-based 
correlated photon pair sources combined interferometrically (Sagnac loop in ifT^ . and type-0 
sandwich in ini) to create entangled pairs, which are markedly more complex experimentally 
than the poled fiber source M used in this work. The usable bandwidths of both sources (10 




Fig. 1. The use of a broadband entangled source and a wavelength-selective switch (WSS) 
allows for any two parties on the network to receive frequency-conjugate polarization- 
entangled photon pairs. The different figure-eights denote the use of different frequency- 
frequency conjugate pairs to distribute entanglement to different users. The broadband na¬ 
ture of the source also allows for multiple simultaneous connections. 


nm in Ga, 55 nm in CSl) are also dwarfed by the bandwidth of the poled fiber source (> 90 
nm, Fig. [2]). Finally, our source has a significantly higher raw entanglement fidelity (F > 0.98, 
Table [B than either PPLN-based sources (F < 0.94); this means that bit-error rates due to the 
quality of the source are greatly reduced when poled fiber is employed for entanglement QKD. 

One may argue that using polarization-entangled photon pairs to transmit a quantum key is 
not practical, due in part to effects such as polarization mode dispersion (PMD) causing the 
quality of entanglement to degrade over long fiber spans. However, we point out that nonlocal 
PMD cancellation is possible for polarization-entangled photons ifT^ . Additionally, for entan¬ 
glement QKD utilizing the time-bin degree of freedom, demonstrations have either been based 
upon their transport in long spools of dispersion-shifted fibers ll20ll rather than regular single¬ 
mode fiber, such as SMF-28, or required nonlocal dispersion cancellation 1211 . 

In this work, we employ a poled fiber-based source (181 [22l of polarization-entangled photon 
pairs. The source generates photon pairs in the triplet state I'P^) = {\HV) + {VH)) /V2. A 
TiiSapphire pulsed laser set to 777.45 nm is used to pump the poled fiber with a 81.6 MHz 
train of 400-ps-long pulses; the average power inside the poled fiber at approximately 50 mW. 
The broadband spectral entanglement of the source is employed to distribute multiple 
frequency-conjugate pairs centered about 1554.9 nm (= 2 x 777.45 nm) to different parties. 
This central wavelength also happens to coincide with Channel 28 of the ITU DWDM grid 
(231. 

Figure [2] shows the joint-spectral intensity (JSI) of the downconverted photon pairs from the 
poled fiber. It was measured with a fiber spectrometer ||^[^. Due to the highly spectrally- 
anticorrelated nature of the downconverted photons, many frequency-conjugate pairs can be 
obtained simultaneously using dense wavelength division multiplexing (DWDM) technology. 

The first two rows of Table [T] give the figures of merit (tangle, fidelity) of the polarization 
entanglement for three frequency-conjugate pairs that are spectrally separated by 3 nm, 45 nm, 
and 75 mm. Pair generation rates of approximately 4 x 10“^ pairs/pulse were used to perform 
quantum state tomography to obtain these measurements. Each of these pairs is highlighted 
in Fig. [2] with a white box. While only 3 distinct conjugate pairs are used here, more than 
25 bi-parties can be accomodated inside this downconversion bandwidth of the poled-fiber, 
assuming channel spacings of 200 GHz that are locked to the ITU grid fl3 \ . An even greater 
number of biparties can be accommodated when the channel spacings are reduced to 100 GHz, 
or 50 GHz. We note that the ITU grid does not currently define any DWDM channels with 


x10' 



1500 


1560 1570 1580 1590 1600 1610 
(nm) 


Fig. 2. (Color online.) The joint spectral intensity (JSI) of the downconverted photons is 
plotted as a function of the signal and idler wavelength. A total of 6.8 x 10“^ pairs/pulse 
per mW of average pump power is generated over the entire spectrum. We observe that the 
JSI is extremely spectrally-anticorrelated. This anti-correlation allows us to separate the 
spectrum into many frequency-conjugate pairs (green and gray square boxes). The three 
pairs used in this work are highlighted by larger gray boxes. See Table [T] for the central 
wavelengths of each pair. 


wavelengths shorter than 1520 nm. The filter centered about 1518.7 was created by cascading 
two coarse WDMs (CWDMs) of bandwidth 16 nm, with one centered at 1510 nm and the other 
centered about 1511 nm. 

In our proof-of-concept demonstration of multi-user QKD, the experimental setup shown in 
Fig. [3^ is used. A cascaded set of DWDMs is employed to spectrally-separate the signal from 
the idler. Each photon then traverses a 20 km spool of SMF-28 before reaching the polariza¬ 
tion analyzers. The BBM92 O protocol is implemented, and experiments are run with three 
different frequency-conjugate signal/idler wavelength pairs (Table [T]). 

Each polarization analyzer consists of a 3dB (50/50) splitter that passively selects the basis 
in which the photon will be measured. In the top arm of the analyzer, the H/V basis is meas¬ 
ured with an unbalanced Mach-Zehnder interferometer (MZI) built from two fiber-pigtailed 
polarization-beam splitters (PBS); this allows for a time-multiplexed measurement scheme in 
which a V-polarized photon will arrive 2.5 ns later than an ^/-polarized photon ||22l. A fiber- 
based polarization controller (EPC) is placed before the PBS-MZI to allow for proper polar¬ 
ization alignment. In the lower arm of the analyzer, a similar unbalanced MZI setup is used to 
measure the photon in the D/A basis. The two arms are then recombined (at a loss penalty of 
3 dB) so that all measurement outcomes H/V/D/A can be discriminated in time and measured 
by a single detector (the idQuantique id220 free-running single photon detector [SPD]) for each 
party. This results in the mapping of the polarization degree-of-freedom onto timebins that are 
evenly-spaced by 2.5 ns (Pig.[3j)). 

There are many advantages that passive basis selection has over active basis selection. Eor 
one, there is no physical limit to the rate of switching enforced upon passive basis selection; 
in active switching, the use of, say, a Pockels cell will result in non-zero settling time and rise 
times. Secondly, the need for a random number generator to choose between bases is obviated 
in passive basis selection. Overall, passive basis selection reduces the complexity of the system 
and allows for higher speeds. 

The experimental conditions are given in the third and fourth row of Table [T] These include 
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Fig. 3. (a) The full experimental setup for QKD. The signal and idler photons are sepa¬ 
rated in wavelength by a WDM before they each traverse a 20-km fiber spool and arrive at 
Alice and Bob’s polarization analyzers, (b) During a QKD experiment, Alice tabulates the 
number of detector ‘clicks’ she receives as a function of their arrival times (with respect 
to the pump laser sync signal), (c) A two-dimensional histogram tabulating all the counts 
observed by Alice and Bob. In a real QKD implementation, only the counts for which Alice 
and Bob’s bases coincided would be kept; these regions are highlighted by square boxes. 
Signal/idler WDMs centered about 1553.3/1556.65 nm are used, with a pair generation rate 
of 8.9 X 10“^ pairs/pulse. The resolution of the histogram is 64 ps. 


Xs (nm) 

Xi (nm) 

1553.3 

1556.6 

1533.3 

1577.1 

1518.7 

1593.0 

Tangle 

0.967d=0.002 

0.964±0.004 

0.952±0.008 

Fidelity to 

0.989±0.001 

0.989±0.001 

0.985±0.002 

Pairs/pulse 
Generated per 
channel BW 

8.9 X 10-3 

7.6 X 10-3 

5.2x10-3 

System Loss 
Signal-i-Idler: 
(dB) 

19.4-hl9.5 

18.7-hl9.8 

18.7-^20.7 

Sifted Key 
Rate (bits/s) 
(±3ct) 

32.5±0.7 

29.4±0.7 

16.3±0.5 

QBER (±3ct): 

en {%) 

CD {%) 

2.35 ±0.51 

2.15 ±0.48 

1.68 ±0.45 
2.23 ±0.51 

4.72±1.0 

7.22±1.2 

Secure Key 
Rate (bits/s) 
(±3ct) 

20.5 ±1.0 

19.7±1.0 

4.0±0.9 


Table 1. Entanglement QKD Results using a poled fiber as a source 

the pair generation rates (which is on the order of 10“^ pairs/pulse), and system loss for signal 
and idler channels including detector efficiency. For each frequency-conjugate pair listed in 
Table [U the acquisition time Tacq for the QKD experiment is 500 seconds. 

An electronic synchronization signal derived from the pump laser is used as a reference to 





























time-tag all detector events. A commercial time-to-digital converter, the PicoQuant HydraHarp 
400, running in time-tagged T3 mode, is used to generate a two-dimensional histogram, which 
graphically tallies the arrival times of all the detector clicks (Fig. [3]:) with respect to the sync 
signal, at a resolution of 64 ps. For each party, measurements are then binned (Fig.[3j)) into 1- 
ns-wide time slots corresponding to the 4 measurement outcomes {H, V, D, and A). The QBER 
(quantum bit error rate) is then calculated from the histogrammed data. As an example, the 
QBER in the H/V basis is calculated using the formula: 

Ch^h^Cvv 

efj — -■) (1) 

Ch,h + Cvy + Cv^H + Cny 

where is the number of coincidence counts observed when Alice and Bob measure in the 
Pa and Pb polarizations (respectively). 

The sifted key rate Rsif is calculated using the formula: 


^sif — 


Cny + Cv^H + Cd,d + Ca,a 


^acq 


( 2 ) 


and Tacq is the experimental acquisition time required to obtain the coincidence counts Cp.^p^. 
We note that a bit-flip must be performed for the H/V coincidences to account for the anti¬ 
correlated outcomes when the state |'P+) is used for QKD. 

Finally, the secure key rate Rsec is obtained from the formula 1^ : 


^sec =^sif - 2 [K^h)'^K^d)] ~ 2 [fi^H)h{eH)-^f{eD)h{eD)]^ , (3) 


where the factor of ^ is due to the passive basis selection being unbiased, h{x) is the binary 
Shannon entropy (h{x) = —vlog 2 (v) — (1 — v)log 2 (l — x)), (e^) is the upper bound for the 

QBER in the H/V (D/A) basis used to estimate the number of keys lost due to privacy ampli¬ 
fication Ga, and f(e) (> 1, but taken to be 1.2 hereafter) is a measure of the efficiency of the 
error-correcting codes ll^ . 

Finite key analysis is summarized in Table[I] with the QBER and Rsec given accompanied by 
their uncertainties at 3 standard deviations (±3a). If we assume the fair-sampling assumption 
holds, a low QBER is enough to ensure the security of the key given an untrustworthy central 
office 1^ . 

Excluding detection efficiencies, the channel loss (DWDMs, fiber spool attenuation, and po¬ 
larization analyzers) for each photon is approximately 12 dB. This is equivalent to distributing 
both photons over 120 km of SMF-28 (which has a linear loss rate of 0.2 dB/km): 2x 60 km = 
2x(12dB/[0.2 dB/km]). 

We observe that secure key rates of up to 20.5 bits/s can be generated. This result is similar to 
rates obtained with telecom-band time-bin entangled photon pairs ||2Q|| distributed over similar 
lengths (50 km) of fiber (12 bits/s). However, the transport medium there was dispersion-shifted 
fiber, and that work only demonstrated the distribution of entangled pairs to a single pair of 
users. 

Our key rate can also be significantly improved upon if: 

• Alice and Bob each have a second detector, with one detector measuring in the H/V basis 
and the other detector the D/A basis (x4), 

• splice losses due to poled-fiber and other devices were reduced (x4), 

• the detector efficiencies were to increase from the current ^ 20% to 60% (x 9) by utilizing 
practical avalanche-photodiode (APD)-based SPDs ||29l[30l, and 
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Fig. 4. Time evolution of the QBER for the 1533/1577 signal/idler set. The horizontal 
errorbars denote the acquisition time for each run (usually 500 seconds), while the vertical 
bars represent the errors (1 standard deviation) due to statistical fluctuations. 


• the pump laser repetition rate were increased from 81.6 MHz to 2 GHz (x 25), generating 
photon pairs that can be detected using low-deadtime APD-based self-differencing 1^ 
or harmonically-gated ISOll SPDs. 

This would result in a 3600-fold improvement in the secure-key rate to 75 kbits/s for each 
signal/idler channel, or an aggregate 1.5 Mbits/s when the entire spectrum of the poled fiber 
is utilized. In addition, the strong spectral correlations of our entangled source (Fig. 13 can be 
exploited for high-dimensional QKD ED , with such a scheme enabling the generation of many 
more than 1 secure bit per coincidence detection . 

We also test the temporal stability of the system. For the 1533/1577 signal/idler set, the 
QKD system is run over a longer period of time (7000 seconds), and the QBER in each run 
is measured and plotted in Fig. [H The horizontal error bars represent the integration time (^ 
500 s) for each run. We observe that over this time, the QBER does not change dramatically, 
implying that the polarization does not drift significantly in a tabletop laboratory setting even 
over a 40 km spool of fiber without active polarization stabilization. 

In summary, we have demonstrated the distribution of quantum keys to multiple users over 
standard DWDM wavelength channels by utilizing a broadband poled-fiber-based polarization- 
entangled source. This is the first step toward an entanglement-based, reconfigurable multi-user 
quantum network that is compatible (without additional resources) to current optical network 
infrastructures. 
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